$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48fa8176-d76e-45c5-84ce-4fc1b030ad5b.roa File: 48fa8176-d76e-45c5-84ce-4fc1b030ad5b.roa (raw, json) Hash identifier: dENioGmvyUtTn518zTjuNLsaUltyKvRubcM08R3h67Q= Subject key identifier: 7F:60:AB:FC:26:47:04:C7:86:29:98:B2:31:E0:40:92:D4:62:32:C2 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 048C84AA26B34F302EB2B710739FFCC49B733F7E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48fa8176-d76e-45c5-84ce-4fc1b030ad5b.roa Signing time: Sat 10 May 2025 00:41:09 +0000 ROA not before: Sat 10 May 2025 00:41:09 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 99.151.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8c:84:aa:26:b3:4f:30:2e:b2:b7:10:73:9f:fc:c4:9b:73:3f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 10 00:41:09 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=ac991484243607b3f7d06ff48cdf7fc77d3009aeba84a7880263346fd85a7faf, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:01:a8:3c:bd:03:1c:74:2a:46:0b:25:e3: 69:6f:d9:c2:ca:26:9b:e7:51:14:6b:e0:bd:b9:bf: e0:11:c4:7f:9a:6f:8e:01:fc:c8:a2:37:30:f2:17: 09:1f:76:11:76:bc:ed:39:72:46:cd:48:ab:af:80: a5:f8:51:38:9e:23:57:d1:e5:a5:9a:c5:49:71:26: bf:e2:4d:1d:1d:e4:94:b5:51:7f:46:8a:e6:6f:1a: 55:eb:59:2b:47:29:bb:82:d1:8e:5e:a7:91:e4:9c: fd:be:6e:12:d2:ba:72:44:9a:a8:63:f3:0b:9a:4d: 5f:bb:05:95:3b:7b:e7:2a:80:15:7b:60:12:80:bf: c0:53:4e:0d:98:2b:e2:0b:c5:5f:b4:82:f0:d3:a2: 2f:8a:c7:67:8c:af:41:2f:03:b3:2a:e7:b9:c0:95: 4b:b9:3c:36:0d:c0:32:f4:22:79:19:7e:d1:e9:25: 99:e7:47:0d:7f:e6:6c:d0:e7:42:5e:4f:12:f3:dc: 46:32:44:2e:4d:ec:31:15:12:47:c8:2e:02:37:e1: 5c:52:c6:5c:f4:ea:93:22:0d:8d:ab:48:c6:8d:19: 05:ec:13:27:03:37:58:3c:1e:e3:54:a3:65:9d:c2: 04:ad:78:84:e1:4c:60:e2:f9:9c:2d:32:53:05:06: 30:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:60:AB:FC:26:47:04:C7:86:29:98:B2:31:E0:40:92:D4:62:32:C2 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48fa8176-d76e-45c5-84ce-4fc1b030ad5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 99.151.136.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:a1:10:8a:d3:4a:26:87:13:eb:13:ba:fb:43:f8:ae:02:3a: 30:7d:3e:dc:df:57:e4:ab:54:0e:3c:f1:d5:16:79:4b:f0:2a: 08:f7:c1:b8:57:e8:64:01:16:dd:b2:f7:7d:df:c8:36:d8:b4: 7c:50:e7:dd:67:67:12:b3:5a:65:b9:1e:f8:8b:fc:ab:a4:54: 06:0e:27:95:aa:50:e4:da:40:d5:2e:a0:a5:3e:14:64:77:26: ed:05:40:df:35:12:39:47:a6:79:bd:cc:59:68:db:81:51:7c: bd:5c:ec:f7:ce:8f:25:b1:54:fa:73:62:7d:d9:02:cf:3e:a3: e1:7b:00:a4:d7:29:ff:31:85:bc:77:20:dd:d8:06:dd:d6:4f: 23:ee:72:60:fb:13:80:01:92:26:83:a5:cb:f3:e0:c0:bd:29: 6e:83:41:d3:0b:95:eb:5a:f3:00:95:b5:08:26:2a:5c:29:03: 6e:99:be:45:77:43:12:df:fb:b0:a7:80:6f:d5:9c:b2:f4:66: 01:14:f8:02:c7:4b:3f:74:62:09:77:28:c4:2b:4f:6c:10:c7: e7:fc:3c:c8:4a:09:e4:f9:ff:8a:bc:8c:40:3a:e5:c9:88:2b: 49:eb:15:dd:4f:6b:60:b7:54:de:0e:75:a9:9d:f9:68:a2:0b: a1:54:ee:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBIyEqiazTzAusrcQc5/8xJtzP34wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNTEwMDA0MTA5WhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzk5MTQ4NDI0MzYwN2IzZjdkMDZmZjQ4Y2RmN2ZjNzdk MzAwOWFlYmE4NGE3ODgwMjYzMzQ2ZmQ4NWE3ZmFmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYlQGoPL0DHHQqRgsl42lv2cLKJpvnURRr4L25v+ARxH+a b44B/MiiNzDyFwkfdhF2vO05ckbNSKuvgKX4UTieI1fR5aWaxUlxJr/iTR0d5JS1 UX9GiuZvGlXrWStHKbuC0Y5ep5HknP2+bhLSunJEmqhj8wuaTV+7BZU7e+cqgBV7 YBKAv8BTTg2YK+ILxV+0gvDToi+Kx2eMr0EvA7Mq57nAlUu5PDYNwDL0InkZftHp JZnnRw1/5mzQ50JeTxLz3EYyRC5N7DEVEkfILgI34VxSxlz06pMiDY2rSMaNGQXs EycDN1g8HuNUo2WdwgSteIThTGDi+ZwtMlMFBjB9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf2Cr/CZHBMeGKZiyMeBAktRiMsIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzQ4ZmE4MTc2LWQ3NmUtNDVjNS04NGNlLTRmYzFiMDMwYWQ1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFjl4gwDQYJKoZIhvcNAQELBQADggEBAC2hEIrTSiaHE+sTuvtD+K4COjB9 PtzfV+SrVA488dUWeUvwKgj3wbhX6GQBFt2y933fyDbYtHxQ591nZxKzWmW5HviL /KukVAYOJ5WqUOTaQNUuoKU+FGR3Ju0FQN81EjlHpnm9zFlo24FRfL1c7PfOjyWx VPpzYn3ZAs8+o+F7AKTXKf8xhbx3IN3YBt3WTyPucmD7E4ABkiaDpcvz4MC9KW6D QdMLleta8wCVtQgmKlwpA26ZvkV3QxLf+7CngG/VnLL0ZgEU+ALHSz90Ygl3KMQr T2wQx+f8PMhKCeT5/4q8jEA65cmIK0nrFd1Pa2C3VN4Odamd+WiiC6FU7qI= -----END CERTIFICATE-----Generated at Sun Jun 1 04:29:23 2025 by rpki-client